This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
File: pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json)
Hash identifier: 7vTbuNWTfzSUSAAssEqKEk7GNdeE8K2z7g5mcQn7CP0=
Subject key identifier: DD:F6:0B:6E:3E:AB:3B:1C:25:67:CA:B9:76:F3:29:81:F8:97:24:5D
Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
Certificate issuer: /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Certificate serial: 93
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
Manifest number: 90
Signing time: Fri 05 Dec 2025 04:28:07 +0000
Manifest this update: Fri 05 Dec 2025 04:28:07 +0000
Manifest next update: Fri 12 Dec 2025 04:28:07 +0000
Files and hashes: 1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: XhW49H022ZvIYEtvo+SB5BEGYJI2kgYZ05XPFx5nfXE=)
2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: EWVCVV5zCZB19LClSuWFTWXQU193NPHqHKJqFm4wMOE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:28:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147 (0x93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Validity
Not Before: Dec 5 04:28:07 2025 GMT
Not After : Dec 12 04:28:07 2025 GMT
Subject: CN=69325f57-8c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:85:f7:ec:fc:f1:90:6e:5a:e1:6c:43:9e:38:
6e:d1:b1:f4:2d:6a:4c:93:8b:29:27:3f:c2:60:4e:
8c:a4:5a:87:d9:10:48:51:b1:d9:12:0b:04:2f:0f:
db:08:e1:15:01:5b:28:cd:78:27:fc:94:08:7d:2b:
1b:8c:da:ec:8a:4a:f8:69:ea:ff:ef:e8:60:17:46:
25:de:db:80:16:5c:1a:18:4f:57:01:a8:4b:18:44:
4a:54:b6:ca:ec:00:a8:96:59:96:e6:a0:88:e6:20:
a5:b5:4c:cf:ab:91:c7:b6:7c:e9:4c:e6:4d:1a:ac:
1d:d8:d9:23:b0:a2:0d:2f:66:5e:78:31:66:ac:49:
9a:63:44:06:c4:d7:fb:33:a6:8b:01:9f:65:f0:10:
02:fe:dd:c2:61:93:24:21:61:49:f2:6b:6f:97:df:
33:0c:ee:22:14:39:d1:d8:3f:ba:1d:da:56:5a:dc:
a5:17:be:41:34:bf:b2:b5:93:b0:74:b7:d7:8e:86:
a8:a1:f7:cd:b1:37:28:3b:9b:f5:4b:c6:9f:2f:93:
3d:76:e0:3c:c8:af:5e:25:d4:2f:46:d3:e9:52:b5:
01:4f:14:be:52:7b:93:b6:4a:0d:05:e4:49:19:c3:
12:59:df:b6:59:6a:e5:0d:54:17:77:0e:8a:c3:23:
7b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F6:0B:6E:3E:AB:3B:1C:25:67:CA:B9:76:F3:29:81:F8:97:24:5D
X509v3 Authority Key Identifier:
keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4b:2f:99:af:ef:a8:d6:16:af:56:20:24:74:ac:88:0d:dc:e2:
84:e9:82:30:d7:97:8d:36:eb:1c:e1:0b:00:37:16:d2:f3:e9:
8a:f3:fe:7f:00:11:59:e2:c9:c4:eb:66:6a:fd:d0:82:b6:39:
d2:29:0f:65:7e:57:f0:c2:e4:f7:dd:45:3c:69:ec:ab:89:95:
8a:56:a7:35:d7:ff:71:16:5d:77:85:2c:f4:6b:b9:13:cb:7a:
95:15:56:da:3f:1d:92:24:49:56:f0:4f:16:21:a1:c0:b0:4b:
da:35:5b:b4:0f:9e:c9:1c:5f:10:53:65:0d:87:86:d6:60:ad:
e8:42:3f:4e:41:9e:40:61:99:01:4a:91:5b:e2:7d:f2:1b:d4:
a7:5c:c5:6d:50:cb:5c:cc:d5:78:d8:95:fe:7b:34:b4:f8:f0:
8d:52:1d:d7:38:4d:b6:21:c3:69:87:7a:6e:0f:a9:75:5a:cd:
35:58:70:a5:d8:09:84:d7:95:7c:d8:28:12:e9:77:5e:f4:8c:
94:6d:e0:21:15:8d:c1:9e:79:ff:6b:cc:15:d6:16:c7:cc:33:
57:75:64:13:64:aa:0f:e5:50:2e:6e:01:94:68:e0:53:d7:8d:
85:14:84:e8:84:2d:1b:13:3f:ec:30:17:3c:ed:0b:26:ce:9b:
7b:7c:b7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:07:52 2025 by rpki-client